Difference between revisions of "Password Recovery for Cisco ASA 5500 Series"
| Line 1: | Line 1: | ||
'''Step 1''' Connect to the security appliance console port according to the "Accessing the Command-Line Interface". | '''Step 1''' Connect to the security appliance console port according to the "Accessing the Command-Line Interface". | ||
| + | |||
| + | |||
''' | ''' | ||
Step 2''' Power off the security appliance, and then power it on. | Step 2''' Power off the security appliance, and then power it on. | ||
| + | |||
| + | |||
''' | ''' | ||
Step 3''' During the startup messages, press the Escape key when prompted to enter ROMMON. | Step 3''' During the startup messages, press the Escape key when prompted to enter ROMMON. | ||
| + | |||
'''Step 4''' To set the security appliance to ignore the startup configuration at reload, enter the following command: | '''Step 4''' To set the security appliance to ignore the startup configuration at reload, enter the following command: | ||
| + | |||
rommon #1> confreg | rommon #1> confreg | ||
| Line 18: | Line 24: | ||
Do you wish to change this configration? y/n [n] | Do you wish to change this configration? y/n [n] | ||
| + | |||
''' | ''' | ||
Step 5''' Record your current configuration register value, so you can restore it later. | Step 5''' Record your current configuration register value, so you can restore it later. | ||
| + | |||
| + | |||
''' | ''' | ||
Step 6''' At the prompt, enter Y to change the value. | Step 6''' At the prompt, enter Y to change the value. | ||
| + | |||
The security appliance prompts you for new values. | The security appliance prompts you for new values. | ||
''' | ''' | ||
Step 7''' Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y. | Step 7''' Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y. | ||
| + | |||
'''Step 8''' Reload the security appliance by entering the following command: | '''Step 8''' Reload the security appliance by entering the following command: | ||
| Line 32: | Line 43: | ||
The security appliance loads a default configuration instead of the startup configuration. | The security appliance loads a default configuration instead of the startup configuration. | ||
| + | |||
| + | |||
''' | ''' | ||
Step 9''' Enter privileged EXEC mode by entering the following command: | Step 9''' Enter privileged EXEC mode by entering the following command: | ||
hostname> enable | hostname> enable | ||
| + | |||
''' | ''' | ||
Step 10''' When prompted for the password, press Return. | Step 10''' When prompted for the password, press Return. | ||
The password is blank. | The password is blank. | ||
| + | |||
''' | ''' | ||
Step 11''' Load the startup configuration by entering the following command: | Step 11''' Load the startup configuration by entering the following command: | ||
hostname# copy startup-config running-config | hostname# copy startup-config running-config | ||
| + | |||
''' | ''' | ||
Step 12''' Enter global configuration mode by entering the following command: | Step 12''' Enter global configuration mode by entering the following command: | ||
hostname# configure terminal | hostname# configure terminal | ||
| + | |||
''' | ''' | ||
Step 13''' Change the passwords in the configuration by entering the following commands, as necessary: | Step 13''' Change the passwords in the configuration by entering the following commands, as necessary: | ||
| Line 56: | Line 73: | ||
hostname(config)# username name password password | hostname(config)# username name password password | ||
| + | |||
''' | ''' | ||
| − | Step 14''' Change the configuration register to load the startup configuration at the next reload by entering the following command: | + | Step 14''' Change the configuration register to |
| + | load the startup configuration at the next reload by entering the following command: | ||
hostname(config)# config-register value | hostname(config)# config-register value | ||
| Line 63: | Line 82: | ||
Where value is the configuration register value you noted in Step 5. 0×1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference. | Where value is the configuration register value you noted in Step 5. 0×1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference. | ||
''' | ''' | ||
| − | Step 15''' Save the new passwords to the startup configuration by entering the following command: | + | Step 15''' |
| + | |||
| + | Save the new passwords to the startup configuration by entering the following command: | ||
hostname(config)# copy running-config startup-config | hostname(config)# copy running-config startup-config | ||
Revision as of 11:01, 11 May 2010
Step 1 Connect to the security appliance console port according to the "Accessing the Command-Line Interface".
Step 2 Power off the security appliance, and then power it on.
Step 3 During the startup messages, press the Escape key when prompted to enter ROMMON.
Step 4 To set the security appliance to ignore the startup configuration at reload, enter the following command:
rommon #1> confreg
The security appliance displays the current configuration register value, and asks if you want to change the value:
Current Configuration Register: 0x00000011
Configuration Summary:
XxXxXxXx**XxXxXxXxXx**XxXxXxXxX**xXxXxXxX**
Do you wish to change this configration? y/n [n]
Step 5 Record your current configuration register value, so you can restore it later.
Step 6 At the prompt, enter Y to change the value.
The security appliance prompts you for new values.
Step 7 Accept the default values for all settings, except for the "disable system configuration?" value; at that prompt, enter Y.
Step 8 Reload the security appliance by entering the following command:
rommon #2> boot
The security appliance loads a default configuration instead of the startup configuration.
Step 9 Enter privileged EXEC mode by entering the following command:
hostname> enable
Step 10 When prompted for the password, press Return.
The password is blank.
Step 11 Load the startup configuration by entering the following command:
hostname# copy startup-config running-config
Step 12 Enter global configuration mode by entering the following command:
hostname# configure terminal
Step 13 Change the passwords in the configuration by entering the following commands, as necessary:
hostname(config)# password password
hostname(config)# enable password password
hostname(config)# username name password password
Step 14 Change the configuration register to load the startup configuration at the next reload by entering the following command:
hostname(config)# config-register value
Where value is the configuration register value you noted in Step 5. 0×1 is the default configuration register. For more information about the configuration register, see the Cisco Security Appliance Command Reference. Step 15
Save the new passwords to the startup configuration by entering the following command:
hostname(config)# copy running-config startup-config
